![Page 1: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/1.jpg)
GPS-Spoofed Synchrophasor Data Correction for State Estimation
Xiaoyuan Fan1, Dongliang Duan1, and Liang Du2
1. Department of Electrical and Computer Engineering University of Wyoming, Laramie, WY, USA
2. Schlumberger, Sugar Land, TX, USA Email: [email protected], [email protected], [email protected]
NASPI Work Group Meeting March 23-24,2015 San Francisco, CA
![Page 2: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/2.jpg)
Outline
• Introduction
• Challenges for Synchrophasor Data: GPS Spoofing Attack
• GPS-Spoofed Synchrophasor Data Correction
• Summary and Future Work
2
![Page 3: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/3.jpg)
3
Power system signal:
: fundamental frequency, 60 Hz in U. S.
: voltage amplitude
: voltage phase
Phasor Representation for Power System
Phasor:
Synchrophasor: Need a common time reference
![Page 4: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/4.jpg)
• GPS signal is received once per second; • Time tagging accuracy better than 1μs 0.02° in phase.
• PMU will be deployed in a huge geographical area.
4
Time Synchronization for PMU
GPS is the best choice.
Synchronized Phasor
Accurate Clock
Common Time Reference
Accurate Synchronization
![Page 5: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/5.jpg)
PMU versus SCADA SCADA PMU
measurements power, voltage, current
magnitude voltage & current phasors,
frequency (derivative)
meas. model non-linear linear
reporting rate one every 1-4 sec 30-60/sec
wide-area sync poor (~1 sec) precise (~1 μs)
5 A. G. Phadke and J. S. Thorp, Synchronized Phasor Measurements and their Applications, Springer, 2008.
“It’s like going from an X-ray to an MRI of the grid,” Terry Boston, PJM CEO
![Page 6: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/6.jpg)
PMU Measurement Example
6 [Dr. Anurag K.S., WSU]
Growing Cyber attacks Heavy reliance on GPS signal Network connection
![Page 7: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/7.jpg)
Challenges for PMU
• Only civilian GPS signal available – Publicly known, easy to predict – Subject to GPS Spoofing Attack (GSA)
• GSA on PMU – Field tests from Northrop Grumman Information Systems and
University of Texas Radio Navigation Laboratory on Dec. 2012 – Inexpensive hardware – Mobile attack in certain distance (~ hundreds of meters) No warning for the spoofed data from PMU ⇒ Reliability and
security of power system is endangered !!!
• Solution Spoofed PMU data must be detected, corrected or removed.
7
![Page 8: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/8.jpg)
Impact of GSA on Synchrophasor Data
• Presence of GSA synchronization is lost – Timestamps on these data are compromised – Mismatch b/w the measured phasor & the true phasor – Equivalent to a phase error on these synchrophasor
measurements • Mathematically,
where is the spoofed phase shift from GSA.
8
![Page 9: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/9.jpg)
Impact of GSA on State Estimation (SE)
• Example: 4-bus benchmark system • PMU installed on bus 1 and bus 4 • GSA information: (4, 0.1π) • PMU data:
9
1
4 3
2
Estimated State
SE Error, no GSA SE Error, under GSA
Mag.(%) Pha. (deg.) Mag.(%) Pha.( deg.)
S1 0.2909 0.2168 1.0180 -8.4112
S2 0.3141 0.2106 1.3210 -8.7127
S3 0.1297 0.4136 1.1834 -8.7018
S4 0.1491 0.4232 1.6222 -8.5204
GSA‘s Impact on State Estimation
Inaccurate state estimation
Unreliable further application
![Page 10: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/10.jpg)
Correction vs. Removal?
10
6 initial measurements
GSA location known GSA location unknown
Correction Removal Correction Removal
# of unknown states
4
4
4
4
# of GSA parameter
1
0
2
1
GSA Localization
6>4+1 OK
6>4 OK
6=4+2 OK
6>4+1 OK
# of remains for SE
6
6-3=3
6
6-3=3
Conclusion better Not applicable OK Not applicable
• GSA can be denoted by (location, spoofed phase shift) • One PMU has multiple measurements • Measurements from same GSA location are affected by the same
Conclusion: Correction is preferable for more accurate result.
![Page 11: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/11.jpg)
PMU-based SE Model
• A linear model for static state estimation with synchrophasor data from p PMUs installed in power system
11
Measurements State
Noise Parameter matrix
where Ai can be obtained from grid structure and transmission line parameters.
![Page 12: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/12.jpg)
PMU-based SE Model under GSA
• Assume GSA is on the k-th PMU with
12
![Page 13: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/13.jpg)
Intuition for Correction
• Two unknowns for single GSA – Location k & Spoofed phase shift
• (1) If location k is known, only need to find the best • (2) If both are unknown
– Enumerate all possible locations in bus index set • i ≠ k, adding GSA to another location larger J(k, ) • i = k, identifying the correct location smaller J(k, )
– Find the best and
13
![Page 14: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/14.jpg)
Cost Function J(k, )
• Best Linear Unbiased Estimator (BLUE)
• Spoofed SE Correction
• Estimation residual with correction
• Cost function J(k, )
14
Residual Sensitivity Matrix
![Page 15: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/15.jpg)
GPS-spoofed Synchrophasor Data Correction
• Spoofing-Matched (SpM) Algorithm – Step 1: Estimate the GSA phase shift
– Step 2: Identify the GSA location
– Step 3: Correct the spoofed data & recover true state
15
![Page 16: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/16.jpg)
GPS-spoofed Synchrophasor Data Correction
• Performance preview for SpM algorithm with grid search – Linear with the total number of PMUs – Linear with the inverse of grid search precision – Constant residual sensitivity matrix
• Improved SpM algorithm
– Better searching technique for Step 1 First order derivative test Iterative methods Golden Section search technique
Fast convergence High accuracy
16
![Page 17: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/17.jpg)
Simulation Setup
• IEEE 14-, 30-, 57-bus benchmark systems • GSA information • System SNR: 20 dB • Golden Search Precision:
17
![Page 18: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/18.jpg)
Performance Metrics
18
• Performance of GSA Detection – Correctness of location ;
CDT: probability of correct detection WDT: probability of wrong detection
– Accuracy of Bias: RMSE:
• Performance of State Estimation – Comparison b/w SpM, WLS, Genie – Magnitude |V| and phase φ of system state
Estimation error RMSE: root mean square error
![Page 19: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/19.jpg)
Generalized Scenario 1:
19
• Location : perfect GSA Phase shift : good
GSA(k, )
2 6 7 90
0.2
0.4
0.6
0.8
1
1.2
1.4
1.6
1.8
2
Bus index of PMU
θ spf
( π)
Estimated GSATrue GSA
![Page 20: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/20.jpg)
Generalized Scenario 4:
20
GSA(k, )
• Location : perfect GSA Phase shift : good
3 4 5 7 101112 17 19 22 242526 2829 300
0.2
0.4
0.6
0.8
1
1.2
1.4
1.6
1.8
2
Bus index of PMU
θ spf
( π)
Estimated GSATrue GSA
![Page 21: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/21.jpg)
Performance of GSA Detection
21
• The detection of location is almost perfect; • The estimation for GSA phase shift is good considering the noise.
SpM has good performance to detect single GSA.
![Page 22: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/22.jpg)
Scenario 1:
22
• State Estimation Error RMSE
GSA(k, )
SpM ≈ Genie, much better than WLS.
![Page 23: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/23.jpg)
Performance of State Estimation
23
• Improvement by SpM compared with WLS is significant; • SpM can achieve good performance close to Genie.
SM improves the state estimation under single GSA.
![Page 24: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/24.jpg)
Summary & Future Work
• GSA is an imminent threat to current power grid
• Spoofed PMU data can be corrected instead of removal
• SpM algorithm provides good performance under single GSA
• Potential research areas:
– Multiple GSA’s impact and detection;
– Anti-GSA strategies, including PMU placement, synchronization
protocols.
24
![Page 25: GPS-Spoofed Synchrophasor Data Correction for … · GPS-Spoofed Synchrophasor Data Correction for State Estimation Xiaoyuan 1Fan 1, Dongliang Duan , and Liang Du 2 1. Department](https://reader031.vdocument.in/reader031/viewer/2022020304/5bbec3d709d3f2114b8d27e5/html5/thumbnails/25.jpg)
Q & A
25
Thank you!